externalizing cookie and session options to config file